File Search Engine
  • Search
  • Syntax
  • Fields
  • API
  • www.x5leiou.top · OpenMinis-1.13.1-hanli-liveness.apk

    /

    Hong Kong · cognetcloud INC

    Yara EXPL_Log4j_CVE_2021_44228_Dec21_Soft From Florian Roth by Florian Roth (Nextron Systems)
    Yara Disable_Defender From AbuseCH by iam-py-test
    Yara EXPL_POC_SpringCore_0day_Indicators_Mar22_1 From Florian Roth by Florian Roth (Nextron Systems)
    Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: 1a9aa632552c4c4cfd1d79600408a7c36b167e07
    SHA256: 0394910b57fd8eb22032672630caed79e69c281d148c34f83787d4f9197c3580
    application/octet-stream
    38.66MB
    2026-09-19 00:03:26 +0000 UTC

  • x5leiou.top · OpenMinis-1.13.1-hanli-liveness.apk

    /

    Hong Kong · cognetcloud INC

    Yara EXPL_Log4j_CVE_2021_44228_Dec21_Soft From Florian Roth by Florian Roth (Nextron Systems)
    Yara Disable_Defender From AbuseCH by iam-py-test
    Yara EXPL_POC_SpringCore_0day_Indicators_Mar22_1 From Florian Roth by Florian Roth (Nextron Systems)
    Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: 1a9aa632552c4c4cfd1d79600408a7c36b167e07
    SHA256: 0394910b57fd8eb22032672630caed79e69c281d148c34f83787d4f9197c3580
    application/octet-stream
    38.66MB
    2026-09-19 00:03:26 +0000 UTC

  • www.x5leiou.top · OpenMinis-1.13-hanli-arm64.apk

    /

    Hong Kong · cognetcloud INC

    Yara EXPL_Log4j_CVE_2021_44228_Dec21_Soft From Florian Roth by Florian Roth (Nextron Systems)
    Yara Disable_Defender From AbuseCH by iam-py-test
    Yara EXPL_POC_SpringCore_0day_Indicators_Mar22_1 From Florian Roth by Florian Roth (Nextron Systems)
    Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: 63a64817ef57486781050366b685ecf19302649b
    SHA256: fc74b9d19dea9f7b5a58cbd22def0132cce3aaffa8c8b35e8321f4fb212f3f65
    application/octet-stream
    38.65MB
    2026-09-18 19:36:30 +0000 UTC

  • x5leiou.top · OpenMinis-1.13-hanli-arm64.apk

    /

    Hong Kong · cognetcloud INC

    Yara EXPL_Log4j_CVE_2021_44228_Dec21_Soft From Florian Roth by Florian Roth (Nextron Systems)
    Yara Disable_Defender From AbuseCH by iam-py-test
    Yara EXPL_POC_SpringCore_0day_Indicators_Mar22_1 From Florian Roth by Florian Roth (Nextron Systems)
    Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: 63a64817ef57486781050366b685ecf19302649b
    SHA256: fc74b9d19dea9f7b5a58cbd22def0132cce3aaffa8c8b35e8321f4fb212f3f65
    application/octet-stream
    38.65MB
    2026-09-18 19:36:30 +0000 UTC

  • x5leiou.top · CNC-1.13.1-arm64.apk

    /

    Hong Kong · cognetcloud INC

    Yara EXPL_Log4j_CVE_2021_44228_Dec21_Soft From Florian Roth by Florian Roth (Nextron Systems)
    Yara Disable_Defender From AbuseCH by iam-py-test
    Yara EXPL_POC_SpringCore_0day_Indicators_Mar22_1 From Florian Roth by Florian Roth (Nextron Systems)
    Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: 1ddf39e91d032d83853d5b381dae40e88d0c4d17
    SHA256: e99ce4d82b39ad5293aa4b112d1f342d3fe9333468d43a7ab29257adee45188b
    application/octet-stream
    38.11MB
    2026-09-19 01:10:31 +0000 UTC

  • www.x5leiou.top · CNC-1.13.1-arm64.apk

    /

    Hong Kong · cognetcloud INC

    Yara EXPL_Log4j_CVE_2021_44228_Dec21_Soft From Florian Roth by Florian Roth (Nextron Systems)
    Yara Disable_Defender From AbuseCH by iam-py-test
    Yara EXPL_POC_SpringCore_0day_Indicators_Mar22_1 From Florian Roth by Florian Roth (Nextron Systems)
    Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: 1ddf39e91d032d83853d5b381dae40e88d0c4d17
    SHA256: e99ce4d82b39ad5293aa4b112d1f342d3fe9333468d43a7ab29257adee45188b
    application/octet-stream
    38.11MB
    2026-09-19 01:10:31 +0000 UTC

  • x5leiou.top · OpenMinis-1.13.1-hanli-liveness.apk

    /

    Hong Kong · cognetcloud INC

    Yara EXPL_Log4j_CVE_2021_44228_Dec21_Soft From Florian Roth by Florian Roth (Nextron Systems)
    Yara Disable_Defender From AbuseCH by iam-py-test
    Yara EXPL_POC_SpringCore_0day_Indicators_Mar22_1 From Florian Roth by Florian Roth (Nextron Systems)
    Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: 35ab0df71ecf3427c43496ecc60c4599f447247b
    SHA256: 8dbea1ecabc0becb7a572888fd3c0bfce436ebceb3815344e82ce2d6dbd4e483
    application/octet-stream
    38.66MB
    2026-09-19 00:03:26 +0000 UTC

  • www.x5leiou.top · OpenMinis-1.13.1-hanli-liveness.apk

    /

    Hong Kong · cognetcloud INC

    Yara EXPL_Log4j_CVE_2021_44228_Dec21_Soft From Florian Roth by Florian Roth (Nextron Systems)
    Yara Disable_Defender From AbuseCH by iam-py-test
    Yara EXPL_POC_SpringCore_0day_Indicators_Mar22_1 From Florian Roth by Florian Roth (Nextron Systems)
    Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: e56fe5b0c049b1eb4771d4126c3988f503ebab62
    SHA256: 020eab0ea217a3d54ddcfb2a37bd8895ff0dd72b96550e4e7da2c696e34a320b
    application/octet-stream
    38.66MB
    2026-09-19 00:03:26 +0000 UTC

  • www.x5leiou.top · OpenMinis-1.13-hanli-arm64.apk

    /

    Hong Kong · cognetcloud INC

    Yara EXPL_Log4j_CVE_2021_44228_Dec21_Soft From Florian Roth by Florian Roth (Nextron Systems)
    Yara Disable_Defender From AbuseCH by iam-py-test
    Yara EXPL_POC_SpringCore_0day_Indicators_Mar22_1 From Florian Roth by Florian Roth (Nextron Systems)
    Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: 63a64817ef57486781050366b685ecf19302649b
    SHA256: fc74b9d19dea9f7b5a58cbd22def0132cce3aaffa8c8b35e8321f4fb212f3f65
    application/octet-stream
    38.65MB
    2026-09-18 19:36:30 +0000 UTC

  • x5leiou.top · OpenMinis-1.13-hanli-arm64.apk

    /

    Hong Kong · cognetcloud INC

    Yara EXPL_Log4j_CVE_2021_44228_Dec21_Soft From Florian Roth by Florian Roth (Nextron Systems)
    Yara Disable_Defender From AbuseCH by iam-py-test
    Yara EXPL_POC_SpringCore_0day_Indicators_Mar22_1 From Florian Roth by Florian Roth (Nextron Systems)
    Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: 9952a300fb0bc72421665dbc622a7c53615b8a48
    SHA256: 736a07af5a6fb38345d7f664a39687dd9e50a8f99713f61a7180ad220fa04d7f
    application/octet-stream
    38.65MB
    2026-09-18 19:36:30 +0000 UTC

  • x5leiou.top · CNC-1.13.1-arm64.apk

    /

    Hong Kong · cognetcloud INC

    Yara EXPL_Log4j_CVE_2021_44228_Dec21_Soft From Florian Roth by Florian Roth (Nextron Systems)
    Yara Disable_Defender From AbuseCH by iam-py-test
    Yara EXPL_POC_SpringCore_0day_Indicators_Mar22_1 From Florian Roth by Florian Roth (Nextron Systems)
    Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: 1ddf39e91d032d83853d5b381dae40e88d0c4d17
    SHA256: e99ce4d82b39ad5293aa4b112d1f342d3fe9333468d43a7ab29257adee45188b
    application/octet-stream
    38.11MB
    2026-09-19 01:10:31 +0000 UTC

  • www.x5leiou.top · CNC-1.13.1-arm64.apk

    /

    Hong Kong · cognetcloud INC

    Yara EXPL_Log4j_CVE_2021_44228_Dec21_Soft From Florian Roth by Florian Roth (Nextron Systems)
    Yara Disable_Defender From AbuseCH by iam-py-test
    Yara EXPL_POC_SpringCore_0day_Indicators_Mar22_1 From Florian Roth by Florian Roth (Nextron Systems)
    Yara Base64_encoded_Executable From Florian Roth by Florian Roth (Nextron Systems)
    Download archived sample
    The password is "infected"

    SHA1: 1ddf39e91d032d83853d5b381dae40e88d0c4d17
    SHA256: e99ce4d82b39ad5293aa4b112d1f342d3fe9333468d43a7ab29257adee45188b
    application/octet-stream
    38.11MB
    2026-09-19 01:10:31 +0000 UTC